General

  • Target

    5a2cfa2d6fafda882a4c9e590baa288e8e2b464e3791c6e821bf0510d78caf37N

  • Size

    192KB

  • MD5

    d4673625a460312e8bc98d4ccab58240

  • SHA1

    54c454f7df4411d46ce71e972621b5a586cd0dd1

  • SHA256

    5a2cfa2d6fafda882a4c9e590baa288e8e2b464e3791c6e821bf0510d78caf37

  • SHA512

    55d2e766cf8f871965120cae1c69a70407b7a02155b1b7e7ec891b0a192a427b0b24771506dc76ce02c1f5a05447446158f9b39d070cebb023629cbe26608f90

  • SSDEEP

    1536:L90UrriLJWfvOBqrM+Yqk3OXyg6ZM7b77PPPW5YVH4sC1ugnouy8O6Nuf51TQmQJ:uUHiLJOOBqkrMYkIoutkTy27zU

Score
10/10

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Signatures

  • Berbew family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a2cfa2d6fafda882a4c9e590baa288e8e2b464e3791c6e821bf0510d78caf37N
    .exe windows:1 windows x86 arch:x86

    26babd76bbb7f9c516a338b0601b4c9f


    Headers

    Imports

    Sections